FlawAtlas
Search the atlas
USN-5691-1 Not scored

linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-bluefield, linux-gcp, linux-gcp-5.4, linux-gke, linux-gkeop, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4 vulnerabilities

David Bouman and Billy Jheng Bing Jhong discovered that a race condition existed in the io_uring subsystem in the Linux kernel, leading to a use- after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-2602) Sönke Huster discovered that an integer overflow vulnerability existed in the WiFi driver stack in the Linux kernel, leading to a buffer overflow. A physically proximate attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-41674) Sönke Huster discovered that the WiFi driver stack in the Linux kernel did not properly perform reference counting in some situations, leading to a use-after-free vulnerability. A physically proximate attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-42720) Sönke Huster discovered that the WiFi driver stack in the Linux kernel did not properly handle BSSID/SSID lists in some situations. A physically proximate attacker could use this to cause a denial of service (infinite loop). (CVE-2022-42721)

Exploit probability Not scored
Published October 19, 2022
Required by Not available
Last source change June 3, 2026

02 / AFFECTED SOFTWARE

Affected packages

Ubuntu:18.04:LTS linux-aws-5.4

45 explicit affected versions

Ubuntu:18.04:LTS linux-azure-5.4

45 explicit affected versions

Ubuntu:18.04:LTS linux-gcp-5.4

47 explicit affected versions

Ubuntu:18.04:LTS linux-hwe-5.4

54 explicit affected versions

Ubuntu:18.04:LTS linux-ibm-5.4

17 explicit affected versions

Ubuntu:18.04:LTS linux-oracle-5.4

46 explicit affected versions

Ubuntu:18.04:LTS linux-raspi-5.4

42 explicit affected versions

Ubuntu:20.04:LTS linux

66 explicit affected versions

Ubuntu:20.04:LTS linux-aws

58 explicit affected versions

Ubuntu:20.04:LTS linux-azure

55 explicit affected versions

Ubuntu:20.04:LTS linux-bluefield

23 explicit affected versions

Ubuntu:20.04:LTS linux-gcp

58 explicit affected versions

Ubuntu:20.04:LTS linux-gke

35 explicit affected versions

Ubuntu:20.04:LTS linux-gkeop

35 explicit affected versions

Ubuntu:20.04:LTS linux-ibm

24 explicit affected versions

Ubuntu:20.04:LTS linux-kvm

53 explicit affected versions

Ubuntu:20.04:LTS linux-oracle

56 explicit affected versions

Ubuntu:20.04:LTS linux-raspi

46 explicit affected versions

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities USN-5691-1

David Bouman and Billy Jheng Bing Jhong discovered that a race condition existed in the io_uring subsystem in the Linux kernel, leading to a use- after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-2602) Sönke Huster discovered that an integer overflow vulnerability existed in the WiFi driver stack in the Linux kernel, leading to a buffer overflow. A physically proximate attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-41674) Sönke Huster discovered that the WiFi driver stack in the Linux kernel did not properly perform reference counting in some situations, leading to a use-after-free vulnerability. A physically proximate attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-42720) Sönke Huster discovered that the WiFi driver stack in the Linux kernel did not properly handle BSSID/SSID lists in some situations. A physically proximate attacker could use this to cause a denial of service (infinite loop). (CVE-2022-42721)

View original source

05 / REFERENCES

Further evidence